Report - counteractpull.com/dp6gv5xk7?adb=n&adb=n&dev=r&fvo=73&key=0a797a40486a3abc3a42e3a43041342b&kw=["stars-503-en-sextb","net-11222022"]&psid=FEATURES-1763_layer_0&refer=https://emturbovid.com/t/db6cjmr0p4fq&res=14.287&scrHeight=720&scrWidth=1280&ship=&sub3=invoke_layer&tz=5.5&uuid=dfdd540a-da4b-43d4-bd9d-4df7e4d135d1:2:1&v=24.2.2196

Report Overview

Visitedpublic

2024-02-20 22:12:12

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
b-hls-12.doppiocdn.com	unknown	2022-02-16	2022-04-21 15:47:02	2024-02-19 12:37:10	2.5 kB	368 kB	104.18.63.133
counteractpull.com	unknown	2024-02-16	2024-02-16 09:53:05	2024-02-20 22:17:43	4.8 kB	5.0 kB	172.240.108.68
img.strpst.com	12993	2021-05-31	2021-06-03 10:45:56	2024-02-20 07:55:57	2.2 kB	52 kB	104.18.63.132
stripchat.global	367148	2019-09-11	2019-12-09 16:10:32	2024-02-20 22:29:50	430 B	730 B	104.18.63.130
stripchat.com	10390	2006-02-13	2016-06-13 12:24:50	2024-02-20 07:54:35	442 B	4.3 kB	104.18.63.130
www.google.com	7	1997-09-15	2015-05-10 13:11:19	2024-02-19 02:55:22	428 B	200 kB	142.250.74.164
video.xxxviiijmp.com	233214	2021-06-22	2021-07-02 12:31:43	2024-02-19 05:23:01	1.0 kB	860 kB	104.18.59.150
www.gstatic.com	unknown	2008-02-11	2016-07-26 11:37:06	2024-02-20 09:08:38	496 B	500 kB	142.250.74.67
edge-hls.doppiocdn.com	unknown	2022-02-16	2022-11-01 13:03:56	2024-02-20 08:27:36	482 B	817 B	104.18.63.133
go.camterest.com	unknown	2021-05-31	2021-06-04 14:52:22	2024-02-18 20:53:05	5.5 kB	8.1 kB	88.208.20.10
creative.camterest.com	unknown	2021-05-31	2021-06-04 14:52:19	2024-02-18 20:53:06	10 kB	1.9 MB	185.98.55.81
video.ktkjmp.com	23778	2020-08-07	2020-10-02 10:52:19	2024-02-20 08:50:50	448 B	1.0 kB	104.18.62.235

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-02-20	medium	counteractpull.com	Sinkholed
2024-02-20	medium	counteractpull.com	Sinkholed
2024-02-20	medium	counteractpull.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (5)

	URL	From	Size	First Seen	Last Seen
	www.gstatic.com/recaptcha/releases/yiNW3R9jkyLVP5-EEZLDzUtA/recaptcha__en.js	ScriptElement	500 kB	2024-02-13	2024-08-20
URL www.gstatic.com/recaptcha/releases/yiNW3R9jkyLVP5-EEZLDzUtA/recaptcha__en.js IP / ASN 142.250.74.67 #15169 GOOGLE Introduced by ScriptElement Embedded false Resource Info First Seen 2024-02-13 Last Seen 2024-08-20 Times Seen 2534 Size 500 kB (499483 bytes) MD5 c37774be5504a3a7def09eff73263bc3 SHA1 c5160a2908b3fd4230ed5cf521728fabaf3b5c06 SHA256 4fd66999fb60ad3289dfaee132ff52c0b1ecba71661e4cbfe47d09ac4f1cd5a1 Format Code Loading...

	creative.camterest.com/LPAkira/hls.4cfa5b780bfed20a8b26.js	ScriptElement	61 B	2023-03-14	2025-08-01
URL creative.camterest.com/LPAkira/hls.4cfa5b780bfed20a8b26.js IP / ASN 185.98.55.81 #39572 DataWeb Global Group B.V. Introduced by ScriptElement Embedded false Resource Info First Seen 2023-03-14 Last Seen 2025-08-01 Times Seen 2416 Size 61 B (61 bytes) MD5 22f22b49cc901aa95826401f7ce0930c SHA1 6471abdd35ab6d511b67d73ad1375f1ee0f255de SHA256 0fae8b03858a764bad3e9af19bfc924ead5b9e25c760432c19e91cba3dff1cf3 Format Code Loading...

	creative.camterest.com/LPAkira/vendors~hls.8b58cc1104228ded0015.js	ScriptElement	178 kB	2024-01-29	2024-08-20
URL creative.camterest.com/LPAkira/vendors~hls.8b58cc1104228ded0015.js IP / ASN 185.98.55.81 #39572 DataWeb Global Group B.V. Introduced by ScriptElement Embedded false Resource Info First Seen 2024-01-29 Last Seen 2024-08-20 Times Seen 7 Size 178 kB (177865 bytes) MD5 98757c5b06801a24a2091143c9792458 SHA1 c563fe0be6a2278b47c40299f39970b0088815ea SHA256 0c5d9ff2a1eca2ec8023449a4a9b9408212581202c324d94faf4c3aee3c7e1dd Format Code Loading...

	creative.camterest.com/LPAkira/main.38ad50f823914bc69f56.js	ScriptElement	406 kB	2023-12-22	2024-08-20
URL creative.camterest.com/LPAkira/main.38ad50f823914bc69f56.js IP / ASN 185.98.55.81 #39572 DataWeb Global Group B.V. Introduced by ScriptElement Embedded false Resource Info First Seen 2023-12-22 Last Seen 2024-08-20 Times Seen 74 Size 406 kB (405468 bytes) MD5 5d32c1f93be877497a589debb83b06f8 SHA1 b41be330490e1f275ab7075cb6b2775f88efd23a SHA256 81445b97ed4dca55f60809120851c5b1b464971c064eac847b7bd67e022c8f01 Format Code Loading...

	www.google.com/recaptcha/api.js?render=explicit	ScriptElement	852 B	2024-02-13	2024-08-20
URL www.google.com/recaptcha/api.js?render=explicit IP / ASN 142.250.74.164 #15169 GOOGLE Introduced by ScriptElement Embedded false Resource Info First Seen 2024-02-13 Last Seen 2024-08-20 Times Seen 212 Size 852 B (852 bytes) MD5 058afda8fe5ad45cde1d8c9608cea2e2 SHA1 3bbd8637e220703041d5cbf9941e3c20cc67bf61 SHA256 77957e8651873f57f5578cb271a1d4b5e1332f330ea4535d675dc4cd67c8e23f Format Code Loading...

HTTP Transactions (40)

URL IP Response Size

counteractpull.com/dp6gv5xk7?adb=n&adb=n&dev=r&fvo=73&key=0a797a40486a3abc3a42e3a43041342b&kw=[%22stars-503-en-sextb%22,%22net-11222022%22]&psid=FEATURES-1763_layer_0&refer=https://emturbovid.com/t/db6cjmr0p4fq&res=14.287&scrHeight=720&scrWidth=1280&ship=&sub3=invoke_layer&tz=5.5&uuid=dfdd540a-da4b-43d4-bd9d-4df7e4d135d1:2:1&v=24.2.2196

172.240.108.68

1.7 kB

URL

IP / ASN

172.240.108.68

#7979 SERVERS-COM

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with very long lines (788)

First Seen2024-08-20

Last Seen2024-08-20

Times Seen1

Size1.7 kB (1668 bytes)

MD5c88aa03e29efded93dab671438bc134f

SHA1f6fbf8eeda34a25def6e1d0a84550941c1e0fa71

SHA25628590fa7ecd1f448b9e113ef5d2a1d004c719046654a7976e174944878a1c7f8

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /dp6gv5xk7?adb=n&adb=n&dev=r&fvo=73&key=0a797a40486a3abc3a42e3a43041342b&kw=[%22stars-503-en-sextb%22,%22net-11222022%22]&psid=FEATURES-1763_layer_0&refer=https://emturbovid.com/t/db6cjmr0p4fq&res=14.287&scrHeight=720&scrWidth=1280&ship=&sub3=invoke_layer&tz=5.5&uuid=dfdd540a-da4b-43d4-bd9d-4df7e4d135d1:2:1&v=24.2.2196 HTTP/1.1
Host: counteractpull.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 20 Feb 2024 22:11:43 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=22320382; expires=Wed, 21 Feb 2024 22:11:43 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.xMAfsVECOSy3weBIWTDxdcgUXKfVSE7zhw0y3_rTlAs; expires=Tue, 20 Feb 2024 22:12:43 GMT
uid_id2=dfdd540a-da4b-43d4-bd9d-4df7e4d135d1:2:1; expires=Tue, 27 Feb 2024 22:11:43 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a4467cc2c21766ae817c1ed818b63f26
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

GET counteractpull.com/api/users?token=L2RwNmd2NXhrNz9hZGI9biZkZXY9ciZmdm89NzMma2V5PTBhNzk3YTQwNDg2YTNhYmMzYTQyZTNhNDMwNDEzNDJiJmt3PSU1QiUyMnN0YXJzLTUwMy1lbi1zZXh0YiUyMiUyQyUyMm5ldC0xMTIyMjAyMiUyMiU1RCZwc2lkPUZFQVRVUkVTLTE3NjNfbGF5ZXJfMCZwc3Q9MTcwODQ2NzE2MyZyZWZlcj1odHRwcyUzQSUyRiUyRmVtdHVyYm92aWQuY29tJTJGdCUyRmRiNmNqbXIwcDRmcSZyZXM9MTQuMjg3JnJtdGM9dCZzY3JIZWlnaHQ9NzIwJnNjcldpZHRoPTEyODAmc2hpcD0mc2h1PTA4OWE1NjM1MDQwOWU3ZmY5MmU4ODA2MzZmOGMwZjgzN2M0NDgyN2Y4OWI3N2E3NzE4ODJkMmUyOWQwMzhiYTU5N2E5YjBlM2VhYTk0NGVlYWZjNmNkZmZkNzkzNzc4MTU5MjllNzEwZTQwZDBhOGM0ZTMzNmM2YWI4YWY3NzNhZGJmYjQ4ZjA5YmJjYjk4Yzc4MjJkMWZlMWRkMjBmNDU0YzY3ZmVjNmU4ZjgwMWI3YmRkNDk2MGIxYTE3JnN1YjM9aW52b2tlX2xheWVyJnR6PTUuNSZ1dWlkPWRmZGQ1NDBhLWRhNGItNDNkNC1iZDlkLTRkZjdlNGQxMzVkMSUzQTIlM0ExJnY9MjQuMi4yMTk2&uuid=dfdd540a-da4b-43d4-bd9d-4df7e4d135d1%3A2%3A1&pii=&in=false

172.240.108.68

302 Found

0 B

URL

counteractpull.com/api/users?token=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&uuid=dfdd540a-da4b-43d4-bd9d-4df7e4d135d1%3A2%3A1&pii=&in=false

IP / ASN

172.240.108.68

#7979 SERVERS-COM

Requested byN/A

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5607188

Size0 B (0 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate Info

IssuerLet's Encrypt

Subjectcounteractpull.com

Fingerprint2F:3B:4D:9F:90:E9:A3:25:2F:FA:AF:20:54:3A:2C:FD:28:8D:C4:2A

ValidityFri, 16 Feb 2024 07:51:32 GMT - Thu, 16 May 2024 07:51:31 GMT

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /api/users?token=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&uuid=dfdd540a-da4b-43d4-bd9d-4df7e4d135d1%3A2%3A1&pii=&in=false HTTP/1.1
Host: counteractpull.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://counteractpull.com/api/users?token=L2RwNmd2NXhrNz9rZXk9OWNhNjAxYTlmNDdjNzM1ZGY3NmQ1Y2E0NmZhMjZhNjYmc3VibWV0cmljPTIyMzIwMzgy
Cookie: u_pl=22320382; ain=eyJhbGciOiJIUzI1NiJ9.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.xMAfsVECOSy3weBIWTDxdcgUXKfVSE7zhw0y3_rTlAs; uid_id2=dfdd540a-da4b-43d4-bd9d-4df7e4d135d1:2:1; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Tue, 20 Feb 2024 22:11:44 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://go.camterest.com/smartpop/5cad3c1caba869d88fad5ee079b8d701edd64c2f2d10934839acb742df41a4f8?userId=b29d5de8081854ddfa64062b762e5cdd52ba5a9ca8232adaa0bb5b33afa805c0&memberId=34f31bdd73b055de92e46382495cad75&p1=ctf
Set-Cookie: uid_id2=dfdd540a-da4b-43d4-bd9d-4df7e4d135d1:2:1; expires=Tue, 27 Feb 2024 22:11:44 GMT
pdhtkv=true; expires=Wed, 21 Feb 2024 22:11:44 GMT
uncs=1; expires=Wed, 21 Feb 2024 22:11:44 GMT
pdhtkv28=true; expires=Wed, 21 Feb 2024 22:11:44 GMT
uncs28=1; expires=Wed, 21 Feb 2024 22:11:44 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b4c27b9098bb8e435b4c849526e919bd
Strict-Transport-Security: max-age=0; includeSubdomains

counteractpull.com/favicon.ico

172.240.108.68

0 B

URL

counteractpull.com/favicon.ico

IP / ASN

172.240.108.68

#7979 SERVERS-COM

Requested byN/A

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5607188

Size0 B (0 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: counteractpull.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://counteractpull.com/api/users?token=L2RwNmd2NXhrNz9rZXk9OWNhNjAxYTlmNDdjNzM1ZGY3NmQ1Y2E0NmZhMjZhNjYmc3VibWV0cmljPTIyMzIwMzgy
Cookie: u_pl=22320382; ain=eyJhbGciOiJIUzI1NiJ9.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.xMAfsVECOSy3weBIWTDxdcgUXKfVSE7zhw0y3_rTlAs; uid_id2=dfdd540a-da4b-43d4-bd9d-4df7e4d135d1:2:1; cjs=t
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 20 Feb 2024 22:11:44 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ca1f86756f4a6acbc41fe1834b1f5786
Strict-Transport-Security: max-age=0; includeSubdomains

GET go.camterest.com/smartpop/5cad3c1caba869d88fad5ee079b8d701edd64c2f2d10934839acb742df41a4f8?userId=b29d5de8081854ddfa64062b762e5cdd52ba5a9ca8232adaa0bb5b33afa805c0&memberId=34f31bdd73b055de92e46382495cad75&p1=ctf

88.208.20.10

302 Found

0 B

URL

go.camterest.com/smartpop/5cad3c1caba869d88fad5ee079b8d701edd64c2f2d10934839acb742df41a4f8?userId=b29d5de8081854ddfa64062b762e5cdd52ba5a9ca8232adaa0bb5b33afa805c0&memberId=34f31bdd73b055de92e46382495cad75&p1=ctf

IP / ASN

88.208.20.10

#39572 DataWeb Global Group B.V.

Requested byN/A

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5607188

Size0 B (0 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate Info

IssuerLet's Encrypt

Subjectgo.camterest.com

FingerprintB9:1C:8E:DC:5F:4A:CE:90:33:EF:EA:A3:BF:86:A0:D1:95:54:08:A3

ValidityTue, 26 Dec 2023 08:33:41 GMT - Mon, 25 Mar 2024 08:33:40 GMT

HTTP Headers

GET /smartpop/5cad3c1caba869d88fad5ee079b8d701edd64c2f2d10934839acb742df41a4f8?userId=b29d5de8081854ddfa64062b762e5cdd52ba5a9ca8232adaa0bb5b33afa805c0&memberId=34f31bdd73b055de92e46382495cad75&p1=ctf HTTP/1.1
Host: go.camterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://counteractpull.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
access-control-allow-credentials: true
alt-svc: h3=":443"; ma=2592000
date: Tue, 20 Feb 2024 22:11:44 GMT
location: https://creative.camterest.com/LPAkira?action=sbSignupWithModel&autoplay=allInFocus&autoplayForce=1&campaignId=5cad3c1caba869d88fad5ee079b8d701edd64c2f2d10934839acb742df41a4f8&campaignType=smartpop&creativeId=5d23be301a5be416fed3c585f9bcceef207b744eec31055abb2f2fded2adec8d&domain=stripchat&iterationId=820720&masterSmartpopId=1603&memberId=34f31bdd73b055de92e46382495cad75&p1=ctf&ruleId=345&smartpopId=10251&userId=b29d5de8081854ddfa64062b762e5cdd52ba5a9ca8232adaa0bb5b33afa805c0&variationId=32628
set-cookie: _var=68087848.32628_YWNiZmFhYjI=; Path=/; Expires=Thu, 21 Mar 2024 22:11:44 GMT; HttpOnly; SameSite=Strict
strict-transport-security: max-age=15768000
content-length: 0
X-Firefox-Spdy: h2

GET creative.camterest.com/LPAkira?action=sbSignupWithModel&autoplay=allInFocus&autoplayForce=1&campaignId=5cad3c1caba869d88fad5ee079b8d701edd64c2f2d10934839acb742df41a4f8&campaignType=smartpop&creativeId=5d23be301a5be416fed3c585f9bcceef207b744eec31055abb2f2fded2adec8d&domain=stripchat&iterationId=820720&masterSmartpopId=1603&memberId=34f31bdd73b055de92e46382495cad75&p1=ctf&ruleId=345&smartpopId=10251&userId=b29d5de8081854ddfa64062b762e5cdd52ba5a9ca8232adaa0bb5b33afa805c0&variationId=32628

185.98.55.81

200 OK

1.2 kB

URL

IP / ASN

185.98.55.81

#39572 DataWeb Global Group B.V.

Requested byN/A

Resource Info

File typeHTML document, Unicode text, UTF-8 text

First Seen2023-12-24

Last Seen2024-08-20

Times Seen38

Size1.2 kB (1152 bytes)

MD5f0658afb4de14346e59f420a37c7c453

SHA1bc7656daa6a36fb7ffa3d9cb19dff0500c01780f

SHA2569bf67599ef38dd623074fa90a6b577b7f25e877c94d08ead96252911e66d7bf2

Certificate Info

IssuerLet's Encrypt

Subjectcreative.camterest.com

FingerprintA2:F0:86:AB:D3:8E:FC:DB:24:9C:1F:74:A8:10:A6:DF:BB:00:2B:4F

ValidityTue, 26 Dec 2023 13:02:03 GMT - Mon, 25 Mar 2024 13:02:02 GMT

HTTP Headers

GET /LPAkira?action=sbSignupWithModel&autoplay=allInFocus&autoplayForce=1&campaignId=5cad3c1caba869d88fad5ee079b8d701edd64c2f2d10934839acb742df41a4f8&campaignType=smartpop&creativeId=5d23be301a5be416fed3c585f9bcceef207b744eec31055abb2f2fded2adec8d&domain=stripchat&iterationId=820720&masterSmartpopId=1603&memberId=34f31bdd73b055de92e46382495cad75&p1=ctf&ruleId=345&smartpopId=10251&userId=b29d5de8081854ddfa64062b762e5cdd52ba5a9ca8232adaa0bb5b33afa805c0&variationId=32628 HTTP/1.1
Host: creative.camterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://counteractpull.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000
cache-control: max-age=10
content-type: text/html; charset=utf-8
date: Tue, 20 Feb 2024 22:11:44 GMT
etag: "65cc76b3-480"
expires: Tue, 20 Feb 2024 22:11:54 GMT
last-modified: Wed, 14 Feb 2024 08:15:47 GMT
pragma: public
report-to: { "endpoints":[{ "url": "https://go.stripchat.com/report" }], "group": "default", "max_age":  1048576 }, { "url": "https://go.camterest.com/report", "max_age":  1048576 }
strict-transport-security: max-age=15768000
content-length: 1152
X-Firefox-Spdy: h2

GET creative.camterest.com/LPAkira/HelveticaNeue.ttf

185.98.55.81

200 OK

642 kB

URL

creative.camterest.com/LPAkira/HelveticaNeue.ttf

IP / ASN

185.98.55.81

#39572 DataWeb Global Group B.V.

Requested byhttps://creative.camterest.com/LPAkira?action=sbSignupWithModel&autoplay=allInFocus&autoplayForce=1&campaignId=5cad3c1caba869d88fad5ee079b8d701edd64c2f2d10934839acb742df41a4f8&campaignType=smartpop&creativeId=5d23be301a5be416fed3c585f9bcceef207b744eec31055abb2f2fded2adec8d&domain=stripchat&iterationId=820720&masterSmartpopId=1603&memberId=34f31bdd73b055de92e46382495cad75&p1=ctf&ruleId=345&smartpopId=10251&userId=b29d5de8081854ddfa64062b762e5cdd52ba5a9ca8232adaa0bb5b33afa805c0&variationId=32628

Resource Info

File typeTrueType Font data, 17 tables, 1st "FFTM", 40 names, Macintosh

First Seen2023-04-11

Last Seen2025-07-23

Times Seen994

Size642 kB (642156 bytes)

MD5072a79d376f0a5e40562e538e3e8f383

SHA117ff561d277b3122ab93bca89fad1fa26db44ce8

SHA256c5a5905988a91d018626c0e194ba6a01eb4047c4b08f7e893dd1d663fe02dd35

Certificate Info

IssuerLet's Encrypt

Subjectcreative.camterest.com

FingerprintA2:F0:86:AB:D3:8E:FC:DB:24:9C:1F:74:A8:10:A6:DF:BB:00:2B:4F

ValidityTue, 26 Dec 2023 13:02:03 GMT - Mon, 25 Mar 2024 13:02:02 GMT

HTTP Headers

GET /LPAkira/HelveticaNeue.ttf HTTP/1.1
Host: creative.camterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.camterest.com/LPAkira/main.38ad50f823914bc69f56.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
access-control-allow-origin: *
etag: "65cc76b3-9cc6c"
cache-control: max-age=10
content-type: application/octet-stream
last-modified: Wed, 14 Feb 2024 08:15:47 GMT
expires: Tue, 20 Feb 2024 22:11:55 GMT
strict-transport-security: max-age=15768000
accept-ranges: bytes
date: Tue, 20 Feb 2024 22:11:45 GMT
content-length: 642156
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
report-to: { "url": "https://go.camterest.com/report", "max_age":  1048576 }

GET creative.camterest.com/widgets/AgeVerification/lang/en.json

185.98.55.81

200 OK

3.8 kB

URL

creative.camterest.com/widgets/AgeVerification/lang/en.json

IP / ASN

185.98.55.81

#39572 DataWeb Global Group B.V.

Resource Info

File typeJSON text data

First Seen2023-04-10

Last Seen2025-08-02

Times Seen361

Size3.8 kB (3846 bytes)

MD59ffcdd312529a9b28e65156dd0014fdb

SHA14133e29495bac1f320ecec0a17f9b9bb8d4f09bb

SHA256142fe2a082dfe43f2eab11533885dba53ecbad12813475b89aa518424bfc062f

Certificate Info

IssuerLet's Encrypt

Subjectcreative.camterest.com

FingerprintA2:F0:86:AB:D3:8E:FC:DB:24:9C:1F:74:A8:10:A6:DF:BB:00:2B:4F

ValidityTue, 26 Dec 2023 13:02:03 GMT - Mon, 25 Mar 2024 13:02:02 GMT

HTTP Headers

GET /widgets/AgeVerification/lang/en.json HTTP/1.1
Host: creative.camterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.camterest.com/LPAkira?action=sbSignupWithModel&autoplay=allInFocus&autoplayForce=1&campaignId=5cad3c1caba869d88fad5ee079b8d701edd64c2f2d10934839acb742df41a4f8&campaignType=smartpop&creativeId=5d23be301a5be416fed3c585f9bcceef207b744eec31055abb2f2fded2adec8d&domain=stripchat&iterationId=820720&masterSmartpopId=1603&memberId=34f31bdd73b055de92e46382495cad75&p1=ctf&ruleId=345&smartpopId=10251&userId=b29d5de8081854ddfa64062b762e5cdd52ba5a9ca8232adaa0bb5b33afa805c0&variationId=32628
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 3846
last-modified: Wed, 14 Feb 2024 08:17:56 GMT
expires: Tue, 20 Feb 2024 22:11:55 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
date: Tue, 20 Feb 2024 22:11:45 GMT
cache-control: max-age=10
strict-transport-security: max-age=15768000
content-type: application/json
etag: "65cc7734-f06"
accept-ranges: bytes
report-to: { "url": "https://go.camterest.com/report", "max_age":  1048576 }

GET creative.camterest.com/widgets/SingleSignUpForm/lang/en.json

185.98.55.81

200 OK

1.4 kB

URL

creative.camterest.com/widgets/SingleSignUpForm/lang/en.json

IP / ASN

185.98.55.81

#39572 DataWeb Global Group B.V.

Resource Info

File typeJSON text data

First Seen2023-05-07

Last Seen2025-08-02

Times Seen279

Size1.4 kB (1364 bytes)

MD578916fd022ef3d6cfc487aad20af0933

SHA1a0eabb4b5345b41089ff3cf8590182b78dd18895

SHA256db678a8de7997df751377c84c4bd9e151a6ab2d25ab7fc57ca1f6b27c5d8e929

Certificate Info

IssuerLet's Encrypt

Subjectcreative.camterest.com

FingerprintA2:F0:86:AB:D3:8E:FC:DB:24:9C:1F:74:A8:10:A6:DF:BB:00:2B:4F

ValidityTue, 26 Dec 2023 13:02:03 GMT - Mon, 25 Mar 2024 13:02:02 GMT

HTTP Headers

GET /widgets/SingleSignUpForm/lang/en.json HTTP/1.1
Host: creative.camterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.camterest.com/LPAkira?action=sbSignupWithModel&autoplay=allInFocus&autoplayForce=1&campaignId=5cad3c1caba869d88fad5ee079b8d701edd64c2f2d10934839acb742df41a4f8&campaignType=smartpop&creativeId=5d23be301a5be416fed3c585f9bcceef207b744eec31055abb2f2fded2adec8d&domain=stripchat&iterationId=820720&masterSmartpopId=1603&memberId=34f31bdd73b055de92e46382495cad75&p1=ctf&ruleId=345&smartpopId=10251&userId=b29d5de8081854ddfa64062b762e5cdd52ba5a9ca8232adaa0bb5b33afa805c0&variationId=32628
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 1364
pragma: public
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
accept-ranges: bytes
cache-control: max-age=10
expires: Tue, 20 Feb 2024 22:11:55 GMT
etag: "65cc7787-554"
last-modified: Wed, 14 Feb 2024 08:19:19 GMT
strict-transport-security: max-age=15768000
content-type: application/json
date: Tue, 20 Feb 2024 22:11:45 GMT
report-to: { "url": "https://go.camterest.com/report", "max_age":  1048576 }

GET video.ktkjmp.com/adsbygoogle.js

104.18.62.235

200 OK

16 B

URL

video.ktkjmp.com/adsbygoogle.js

IP / ASN

104.18.62.235

#13335 CLOUDFLARENET

Resource Info

File typeASCII text

First Seen2023-04-05

Last Seen2025-01-27

Times Seen5473

Size16 B (16 bytes)

MD53d7f7a60216d40dea48e495fef6903c9

SHA1fecdb5184f55cf012563d78940eb97b10b9cc99b

SHA25696d83ac9f20fc0b88404f307f135e212642e02d6ea295c96b28aed0d771a224f

Certificate Info

IssuerCloudflare, Inc.

Subjectvideo.ktkjmp.com

Fingerprint02:C1:75:9D:DD:6A:66:20:9E:A3:46:1B:5E:A4:87:83:5A:09:92:93

ValiditySun, 02 Jul 2023 00:00:00 GMT - Mon, 01 Jul 2024 23:59:59 GMT

HTTP Headers

GET /adsbygoogle.js HTTP/1.1
Host: video.ktkjmp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.camterest.com/
Origin: https://creative.camterest.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 20 Feb 2024 22:11:45 GMT
content-type: application/javascript
content-length: 16
x-amz-id-2: J0JDcjfcTIRMlw5oG3hTaEZiZ0q06DbOn9KyXnOLUVcx5QWdKrx5Os4/dPViEtZy+1pcqO44lz4=
x-amz-request-id: 8ZSX00X9AY807ZS9
last-modified: Thu, 10 Mar 2022 13:52:07 GMT
etag: "3d7f7a60216d40dea48e495fef6903c9"
x-amz-meta-s3cmd-attrs: atime:1646920284/ctime:1646920283/gid:20/gname:staff/md5:3d7f7a60216d40dea48e495fef6903c9/mode:33188/mtime:1646920283/uid:501/uname:mikhailchubar
x-amz-version-id: eIgLIBoMMcsEXtxOH6UDjWyfAquRpkIG
access-control-allow-origin: https://creative.camterest.com
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: HIT
age: 4927
expires: Wed, 21 Feb 2024 02:11:45 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 858a1650ce8a56ae-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET go.camterest.com/config?url=https%3A%2F%2Fcreative.camterest.com%2FLPAkira%3Faction%3DsbSignupWithModel%26autoplay%3DallInFocus%26autoplayForce%3D1%26campaignId%3D5cad3c1caba869d88fad5ee079b8d701edd64c2f2d10934839acb742df41a4f8%26campaignType%3Dsmartpop%26creativeId%3D5d23be301a5be416fed3c585f9bcceef207b744eec31055abb2f2fded2adec8d%26domain%3Dstripchat%26iterationId%3D820720%26masterSmartpopId%3D1603%26memberId%3D34f31bdd73b055de92e46382495cad75%26p1%3Dctf%26ruleId%3D345%26smartpopId%3D10251%26userId%3Db29d5de8081854ddfa64062b762e5cdd52ba5a9ca8232adaa0bb5b33afa805c0%26variationId%3D32628

88.208.20.10

200 OK

2.2 kB

URL

go.camterest.com/config?url=https%3A%2F%2Fcreative.camterest.com%2FLPAkira%3Faction%3DsbSignupWithModel%26autoplay%3DallInFocus%26autoplayForce%3D1%26campaignId%3D5cad3c1caba869d88fad5ee079b8d701edd64c2f2d10934839acb742df41a4f8%26campaignType%3Dsmartpop%26creativeId%3D5d23be301a5be416fed3c585f9bcceef207b744eec31055abb2f2fded2adec8d%26domain%3Dstripchat%26iterationId%3D820720%26masterSmartpopId%3D1603%26memberId%3D34f31bdd73b055de92e46382495cad75%26p1%3Dctf%26ruleId%3D345%26smartpopId%3D10251%26userId%3Db29d5de8081854ddfa64062b762e5cdd52ba5a9ca8232adaa0bb5b33afa805c0%26variationId%3D32628

IP / ASN

88.208.20.10

#39572 DataWeb Global Group B.V.

Resource Info

File typegzip compressed data, from Unix

First Seen2024-08-20

Last Seen2024-08-20

Times Seen1

Size2.2 kB (2192 bytes)

MD5c268b8558bf4a1ee7dca8fbfdd5ba4b2

SHA11bab8940546f3e49ee1a190825fd20ef796f5945

SHA256d2e7db6ae0f8e708dce274ba8dd28bb6e363519bcc68d911cb96851f1866231d

Certificate Info

IssuerLet's Encrypt

Subjectgo.camterest.com

FingerprintB9:1C:8E:DC:5F:4A:CE:90:33:EF:EA:A3:BF:86:A0:D1:95:54:08:A3

ValidityTue, 26 Dec 2023 08:33:41 GMT - Mon, 25 Mar 2024 08:33:40 GMT

HTTP Headers

GET /config?url=https%3A%2F%2Fcreative.camterest.com%2FLPAkira%3Faction%3DsbSignupWithModel%26autoplay%3DallInFocus%26autoplayForce%3D1%26campaignId%3D5cad3c1caba869d88fad5ee079b8d701edd64c2f2d10934839acb742df41a4f8%26campaignType%3Dsmartpop%26creativeId%3D5d23be301a5be416fed3c585f9bcceef207b744eec31055abb2f2fded2adec8d%26domain%3Dstripchat%26iterationId%3D820720%26masterSmartpopId%3D1603%26memberId%3D34f31bdd73b055de92e46382495cad75%26p1%3Dctf%26ruleId%3D345%26smartpopId%3D10251%26userId%3Db29d5de8081854ddfa64062b762e5cdd52ba5a9ca8232adaa0bb5b33afa805c0%26variationId%3D32628 HTTP/1.1
Host: go.camterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.camterest.com/
Origin: https://creative.camterest.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
vary: Accept-Encoding
strict-transport-security: max-age=15768000
content-type: application/json
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
content-encoding: gzip
date: Tue, 20 Feb 2024 22:11:45 GMT
access-control-allow-origin: https://creative.camterest.com
access-control-allow-credentials: true

GET stripchat.com/api/external/v3/auth/check

104.18.63.130

204 No Content

0 B

URL

stripchat.com/api/external/v3/auth/check

IP / ASN

104.18.63.130

#13335 CLOUDFLARENET

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5607188

Size0 B (0 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate Info

IssuerCloudflare, Inc.

Subjectstripchat.com

Fingerprint3C:12:9D:04:0C:06:77:D6:C0:CF:16:86:EF:54:A5:31:EE:4A:CC:2E

ValidityMon, 01 Jan 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

HTTP Headers

GET /api/external/v3/auth/check HTTP/1.1
Host: stripchat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.camterest.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 204 No Content
date: Tue, 20 Feb 2024 22:11:45 GMT
x-api-version: 10.78.33
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
x-backend: juliett-backend-yellow-75fbb7fcbd-9crsj
strict-transport-security: max-age=15768000
content-security-policy: default-src 'self' *.stripchat.com data: blob: *.amplitude.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.lovense.club:* *.lovense.com *.lovense-api.com *.stripcdn.com *.stripst.com *.stripst.dev *.strpst.com *.strwst.com *.doppiocdn.com *.doppiocdn.net *.doppiocdn.org *.doppiocdn.media *.doppiostreams.com *.trafficjunky.net main.exoclick.com tsyndicate.com *.hotjar.com *.hotjar.io fpnpmcdn.net loo3laej.com stripchat.page;img-src 'self' * data: blob: android-webview-video-poster:;script-src 'self' *.stripchat.com data: 'unsafe-inline' 'unsafe-eval' blob: *.amplitude.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.hpyrdr.dev *.hytto.com *.lovense.club:* *.lovense.com *.lovense-api.com *.stripst.com *.stripst.dev *.strpst.com *.strwst.com *.trafficjunky.net *.google.com platform.twitter.com main.exoclick.com tsyndicate.com wss://*.sc-apps.com www.googleadservices.com cdnjs.cloudflare.com/ajax/libs/fingerprintjs2/2.1.2/fingerprint2.min.js *.hotjar.com *.crowdin.com cdntechone.com fpnpmcdn.net loo3laej.com stripchat.page *.nktrdr.com *.ktkjmp.com *.xhamster.com *.llyjmp.com *.lxzrdr.com *.stripcash.com *.mnaspm.com *.rmhfrtnd.com *.xxxivjmp.com *.xxxvjmp.com *.xxxviijmp.com *.xxxviiijmp.com *.rmshqa.com *.xlivrdr.com *.xlvrdr.com *.xlviirdr.com *.xlviiirdr.com *.zybrdr.com *.bbrdbr.com *.dmsktmld.com *.fxmnba.com *.althz.com;connect-src 'self' *.stripchat.com *.amplitude.com *.doubleclick.net *.flixstorage.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.hytto.com *.lovense.club:* *.lovense.com *.lovense-api.com *.stripcdn.com *.xhamsterlive.com *.xlivesex.com *.stripst.com *.stripst.dev *.strpst.com *.strwst.com *.doppiocdn.com *.doppiocdn.net *.doppiocdn.org *.doppiocdn.media *.doppiostreams.com syndication.twitter.com wss://*.stripchat.com wss://*.stripcdn.com wss://*.stripcdn.com:8090 wss://*.stripst.com wss://*.stripst.dev wss://*.strpst.com wss://*.strwst.com wss://*.doppiocdn.com wss://*.doppiocdn.org wss://*.doppiocdn.media wss://*.lovense.com wss://*.lovense-api.com wss://*.sc-apps.com *.crowdin.com crowdin.com datatechone.com stquality.org accounts.google.com fpnpmcdn.net loo3laej.com stripchat.page *.nktrdr.com *.ktkjmp.com *.xhamster.com *.llyjmp.com *.lxzrdr.com *.stripcash.com *.mnaspm.com *.rmhfrtnd.com *.xxxivjmp.com *.xxxvjmp.com *.xxxviijmp.com *.xxxviiijmp.com *.rmshqa.com *.xlivrdr.com *.xlvrdr.com *.xlviirdr.com *.xlviiirdr.com *.zybrdr.com *.bbrdbr.com *.dmsktmld.com *.fxmnba.com *.althz.com;media-src 'self' *.stripchat.com data: blob: *.ahcdn.com *.lovense.club:* *.lovense.com *.lovense-api.com *.stripcdn.com *.stripst.com *.stripst.dev *.strpst.com *.strwst.com *.doppiocdn.com *.doppiocdn.net *.doppiocdn.org *.doppiocdn.media stripchat.page;style-src 'self' *.stripchat.com 'unsafe-inline' *.googleapis.com *.hytto.com *.lovense.club:* *.lovense.com *.lovense-api.com *.stripcdn.com *.stripst.com *.stripst.dev *.strpst.com *.strwst.com *.tagmanager.google.com *.crowdin.com accounts.google.com stripchat.page;frame-src * data:;report-uri /_csp
x-frame-options: deny
cf-cache-status: DYNAMIC
set-cookie: stripchat_com_guestId=e11f83ccd43a5c19549368b21b00e503825e84e2776cc8119e02f01129f5; expires=Mon, 20-May-2024 22:11:45 GMT; path=/; domain=stripchat.com; sameSite=None; secure; httponly
stripchat_com_firstVisit=2024-02-20T22%3A11%3A45Z; expires=Wed, 19-Feb-2025 22:11:45 GMT; path=/; domain=stripchat.com; httponly
__cf_bm=wmcy82gKC3Z5jqIYFZ048tihGu0IYzCcHWckQork7Vk-1708467105-1.0-AQnkmwh9uns8Aj+ruYbhu7Yg0lMnFCPUjDh4gItUBx9xmfvUJFftQmcFxG9xr/Yo1ZXMpG++8f7ZET0eFj0HiZ1qXUQvy96gN/fLCA3SwUgt; path=/; expires=Tue, 20-Feb-24 22:41:45 GMT; domain=.stripchat.com; HttpOnly; Secure; SameSite=None
__cflb=02DiuFntVtrkFMde1dhT2SMf4X86UkMEKHposDrJ1viYL; SameSite=None; Secure; path=/; expires=Wed, 21-Feb-24 21:11:45 GMT; HttpOnly
server: cloudflare
cf-ray: 858a1651fafb569f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET www.google.com/recaptcha/api.js?render=explicit

142.250.74.164

200 OK

200 kB

URL

www.google.com/recaptcha/api.js?render=explicit

IP / ASN

142.250.74.164

#15169 GOOGLE

Resource Info

File typeJavaScript source, ASCII text, with very long lines (866)

First Seen2024-02-13

Last Seen2024-08-20

Times Seen3

Size200 kB (199467 bytes)

MD51265d805f8c2b93841102aff29d0fa48

SHA1fb3ee5604341b6d0c0760414a91bff1e889212bc

SHA2568a5c93e1b0dfae742c81f0271383f6c26d82418086a9dc6d1f74347191512e1f

Certificate Info

IssuerGoogle Trust Services LLC

Subjectwww.google.com

Fingerprint2A:14:A8:9A:EA:5B:44:20:C3:AE:90:FF:4D:2F:4C:22:15:54:F9:7C

ValidityMon, 29 Jan 2024 08:20:23 GMT - Mon, 22 Apr 2024 08:20:22 GMT

HTTP Headers

GET /recaptcha/api.js?render=explicit HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.camterest.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Tue, 20 Feb 2024 22:11:45 GMT
date: Tue, 20 Feb 2024 22:11:45 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET go.camterest.com/app/domain-checker/get-check

88.208.20.10

200 OK

130 B

URL

go.camterest.com/app/domain-checker/get-check

IP / ASN

88.208.20.10

#39572 DataWeb Global Group B.V.

Resource Info

File typeJSON text data

First Seen2023-11-24

Last Seen2024-08-20

Times Seen34

Size130 B (130 bytes)

MD52230875bd7d0ea339c9f9bd12b10b46d

SHA1b37fc4167f7e9c8361b8088e3fd7192cf3685bc2

SHA2568564b96b04a4796b50418d7d60c5d3e7aecf3134cebc6e03c30e5c7813960237

Certificate Info

IssuerLet's Encrypt

Subjectgo.camterest.com

FingerprintB9:1C:8E:DC:5F:4A:CE:90:33:EF:EA:A3:BF:86:A0:D1:95:54:08:A3

ValidityTue, 26 Dec 2023 08:33:41 GMT - Mon, 25 Mar 2024 08:33:40 GMT

HTTP Headers

GET /app/domain-checker/get-check HTTP/1.1
Host: go.camterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.camterest.com/
Origin: https://creative.camterest.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
access-control-allow-credentials: true
content-type: application/json
date: Tue, 20 Feb 2024 22:11:45 GMT
strict-transport-security: max-age=15768000
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
content-length: 130
access-control-allow-origin: https://creative.camterest.com

GET go.camterest.com/api/models?forceClient=1&stripcashR=0&limit=5&usePreroll&webp=1

88.208.20.10

200 OK

1.8 kB

URL

go.camterest.com/api/models?forceClient=1&stripcashR=0&limit=5&usePreroll&webp=1

IP / ASN

88.208.20.10

#39572 DataWeb Global Group B.V.

Resource Info

File typegzip compressed data, from Unix

First Seen2024-08-20

Last Seen2024-08-20

Times Seen1

Size1.8 kB (1831 bytes)

MD58089cf03c7c4355edb6cfd7c2413961f

SHA1cfca908d399d934d56996dff554b1836d19a2266

SHA256dffe5ebe32b21ade22c00c465a7d6ef60bccb75933f99d94048107587c46f2ea

Certificate Info

IssuerLet's Encrypt

Subjectgo.camterest.com

FingerprintB9:1C:8E:DC:5F:4A:CE:90:33:EF:EA:A3:BF:86:A0:D1:95:54:08:A3

ValidityTue, 26 Dec 2023 08:33:41 GMT - Mon, 25 Mar 2024 08:33:40 GMT

HTTP Headers

GET /api/models?forceClient=1&stripcashR=0&limit=5&usePreroll&webp=1 HTTP/1.1
Host: go.camterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.camterest.com/
Origin: https://creative.camterest.com
DNT: 1
Connection: keep-alive
Cookie: _var=68087848.32628_YWNiZmFhYjI=
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
date: Tue, 20 Feb 2024 22:11:45 GMT
strict-transport-security: max-age=15768000
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: https://creative.camterest.com
access-control-allow-credentials: true
content-type: application/json

GET creative.camterest.com/LPAkira/HelveticaNeue-Medium.ttf

185.98.55.81

200 OK

256 kB

URL

creative.camterest.com/LPAkira/HelveticaNeue-Medium.ttf

IP / ASN

185.98.55.81

#39572 DataWeb Global Group B.V.

Resource Info

File typeTrueType Font data, 18 tables, 1st "FFTM", 40 names, Macintosh

First Seen2023-04-11

Last Seen2025-07-23

Times Seen1044

Size256 kB (256020 bytes)

MD55d6f90814caed5e3c4d5e2bf78714fc6

SHA188b761e46449399b29e10fb66dc73e63e59c3e93

SHA25670da8ef2f79c1da6a9c25c8935f04b8fcd44d80d7efd9f23feca51596811645e

Certificate Info

IssuerLet's Encrypt

Subjectcreative.camterest.com

FingerprintA2:F0:86:AB:D3:8E:FC:DB:24:9C:1F:74:A8:10:A6:DF:BB:00:2B:4F

ValidityTue, 26 Dec 2023 13:02:03 GMT - Mon, 25 Mar 2024 13:02:02 GMT

HTTP Headers

GET /LPAkira/HelveticaNeue-Medium.ttf HTTP/1.1
Host: creative.camterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.camterest.com/LPAkira/main.38ad50f823914bc69f56.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
access-control-allow-origin: *
date: Tue, 20 Feb 2024 22:11:45 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
content-type: application/octet-stream
expires: Tue, 20 Feb 2024 22:11:55 GMT
content-length: 256020
last-modified: Wed, 14 Feb 2024 08:15:47 GMT
strict-transport-security: max-age=15768000
accept-ranges: bytes
report-to: { "url": "https://go.camterest.com/report", "max_age":  1048576 }
cache-control: max-age=10
etag: "65cc76b3-3e814"

GET creative.camterest.com/LPAkira/HelveticaNeue-Bold.ttf

185.98.55.81

200 OK

322 kB

URL

creative.camterest.com/LPAkira/HelveticaNeue-Bold.ttf

IP / ASN

185.98.55.81

#39572 DataWeb Global Group B.V.

Resource Info

File typeTrueType Font data, 17 tables, 1st "FFTM", 38 names, Macintosh

First Seen2023-04-11

Last Seen2025-07-23

Times Seen1046

Size322 kB (322508 bytes)

MD5f51e47dd78152318d01f10739a7e610e

SHA18772b55ed23b9a9dfd0e6dc848d01db17e30a141

SHA2569127e8991d4ad0f0d6306513785b4a86c3b3bd6a24d25d2879e00009f175f294

Certificate Info

IssuerLet's Encrypt

Subjectcreative.camterest.com

FingerprintA2:F0:86:AB:D3:8E:FC:DB:24:9C:1F:74:A8:10:A6:DF:BB:00:2B:4F

ValidityTue, 26 Dec 2023 13:02:03 GMT - Mon, 25 Mar 2024 13:02:02 GMT

HTTP Headers

GET /LPAkira/HelveticaNeue-Bold.ttf HTTP/1.1
Host: creative.camterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.camterest.com/LPAkira/main.38ad50f823914bc69f56.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
report-to: { "url": "https://go.camterest.com/report", "max_age":  1048576 }
accept-ranges: bytes
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
expires: Tue, 20 Feb 2024 22:11:55 GMT
date: Tue, 20 Feb 2024 22:11:45 GMT
content-length: 322508
cache-control: max-age=10
access-control-allow-origin: *
strict-transport-security: max-age=15768000
last-modified: Wed, 14 Feb 2024 08:15:47 GMT
content-type: application/octet-stream
etag: "65cc76b3-4ebcc"

GET go.camterest.com/abc.gif?action=sbSignupWithModel&campaignId=5cad3c1caba869d88fad5ee079b8d701edd64c2f2d10934839acb742df41a4f8&campaignType=smartpop&creativeId=5d23be301a5be416fed3c585f9bcceef207b744eec31055abb2f2fded2adec8d&iterationId=820720&masterSmartpopId=1603&p1=ctf&ruleId=345&smartpopId=10251&userId=b29d5de8081854ddfa64062b762e5cdd52ba5a9ca8232adaa0bb5b33afa805c0&variationId=32628&language=en&agev=0&nonNudeContent=0&stripcashR=0&thumbFit=cover&quality=original&thumbType=default&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=5&segment=hls-newAPI&landing=LPAkira&referrer=https%3A%2F%2Fcounteractpull.com%2F&i=0&ib=0&filtersMatch=1&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A0%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A768%2C%22duration%22%3A78%2C%22transferSize%22%3A13060%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A769%2C%22duration%22%3A122%2C%22transferSize%22%3A120216%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A1018%2C%22duration%22%3A197%2C%22transferSize%22%3A0%7D%2C%7B%22type%22%3A%22first-contentful-paint%22%2C%22startTime%22%3A1420%2C%22duration%22%3A0%7D%5D&mh=-1294440316

88.208.20.10

200 OK

103 B

URL

go.camterest.com/abc.gif?action=sbSignupWithModel&campaignId=5cad3c1caba869d88fad5ee079b8d701edd64c2f2d10934839acb742df41a4f8&campaignType=smartpop&creativeId=5d23be301a5be416fed3c585f9bcceef207b744eec31055abb2f2fded2adec8d&iterationId=820720&masterSmartpopId=1603&p1=ctf&ruleId=345&smartpopId=10251&userId=b29d5de8081854ddfa64062b762e5cdd52ba5a9ca8232adaa0bb5b33afa805c0&variationId=32628&language=en&agev=0&nonNudeContent=0&stripcashR=0&thumbFit=cover&quality=original&thumbType=default&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=5&segment=hls-newAPI&landing=LPAkira&referrer=https%3A%2F%2Fcounteractpull.com%2F&i=0&ib=0&filtersMatch=1&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A0%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A768%2C%22duration%22%3A78%2C%22transferSize%22%3A13060%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A769%2C%22duration%22%3A122%2C%22transferSize%22%3A120216%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A1018%2C%22duration%22%3A197%2C%22transferSize%22%3A0%7D%2C%7B%22type%22%3A%22first-contentful-paint%22%2C%22startTime%22%3A1420%2C%22duration%22%3A0%7D%5D&mh=-1294440316

IP / ASN

88.208.20.10

#39572 DataWeb Global Group B.V.

Resource Info

File typedata

First Seen2023-04-07

Last Seen2025-03-01

Times Seen5361

Size103 B (103 bytes)

MD58c99886486b9a004383cb4df29011c43

SHA1d79ca4754481fc59598bc08fcdf354900918bffe

SHA256bda00b0f6892b1c6991e793b42654ad1807694e2ffabcbc4eb1399379737ef6c

Certificate Info

IssuerLet's Encrypt

Subjectgo.camterest.com

FingerprintB9:1C:8E:DC:5F:4A:CE:90:33:EF:EA:A3:BF:86:A0:D1:95:54:08:A3

ValidityTue, 26 Dec 2023 08:33:41 GMT - Mon, 25 Mar 2024 08:33:40 GMT

HTTP Headers

GET /abc.gif?action=sbSignupWithModel&campaignId=5cad3c1caba869d88fad5ee079b8d701edd64c2f2d10934839acb742df41a4f8&campaignType=smartpop&creativeId=5d23be301a5be416fed3c585f9bcceef207b744eec31055abb2f2fded2adec8d&iterationId=820720&masterSmartpopId=1603&p1=ctf&ruleId=345&smartpopId=10251&userId=b29d5de8081854ddfa64062b762e5cdd52ba5a9ca8232adaa0bb5b33afa805c0&variationId=32628&language=en&agev=0&nonNudeContent=0&stripcashR=0&thumbFit=cover&quality=original&thumbType=default&modelsInWatchHistoryCount=-1&modelsInFavoritesCount=-1&userType=newuser&modelsCount=5&segment=hls-newAPI&landing=LPAkira&referrer=https%3A%2F%2Fcounteractpull.com%2F&i=0&ib=0&filtersMatch=1&m=%5B%7B%22type%22%3A%22navigation%22%2C%22startTime%22%3A0%2C%22duration%22%3A0%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A768%2C%22duration%22%3A78%2C%22transferSize%22%3A13060%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A769%2C%22duration%22%3A122%2C%22transferSize%22%3A120216%7D%2C%7B%22type%22%3A%22resource%22%2C%22startTime%22%3A1018%2C%22duration%22%3A197%2C%22transferSize%22%3A0%7D%2C%7B%22type%22%3A%22first-contentful-paint%22%2C%22startTime%22%3A1420%2C%22duration%22%3A0%7D%5D&mh=-1294440316 HTTP/1.1
Host: go.camterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.camterest.com/
Cookie: _var=68087848.32628_YWNiZmFhYjI=
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 20 Feb 2024 22:11:45 GMT
content-type: image/gif
content-length: 103
strict-transport-security: max-age=15768000
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
access-control-allow-credentials: true

GET video.xxxviiijmp.com/production/whiteLabels/logo/5/1/a/51a9a56975fa725f6b17724c33f57832.png

104.18.59.150

200 OK

23 kB

URL

video.xxxviiijmp.com/production/whiteLabels/logo/5/1/a/51a9a56975fa725f6b17724c33f57832.png

IP / ASN

104.18.59.150

#13335 CLOUDFLARENET

Resource Info

File typePNG image data, 1669 x 363, 8-bit/color RGBA, non-interlaced

First Seen2023-10-01

Last Seen2025-07-27

Times Seen68

Size23 kB (23414 bytes)

MD562b6646355ac99eec83f55eeadaffff8

SHA12acb50759618496e61021704ff357016b52752b6

SHA256e3370a08435b517e7e6e46f4c02187e10dd4526c1d208d5d0fc7af546abb4687

Certificate Info

IssuerCloudflare, Inc.

Subjectxxxviiijmp.com

Fingerprint9E:90:15:DB:63:8A:B4:41:A4:D5:B3:FC:26:60:B7:3A:FA:2B:D3:53

ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT

HTTP Headers

GET /production/whiteLabels/logo/5/1/a/51a9a56975fa725f6b17724c33f57832.png HTTP/1.1
Host: video.xxxviiijmp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.camterest.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 20 Feb 2024 22:11:46 GMT
content-type: image/png
content-length: 23414
x-amz-id-2: K3o4QfwlLuwhV0MnHWEq4jW+i5FbI1R61WBvOMdaNhhaGwcYvoYaoZofSVxLXQPpFGnrYToDeSs=
x-amz-request-id: D5A4W848XA6S47DX
last-modified: Mon, 21 Mar 2022 13:52:06 GMT
etag: "62b6646355ac99eec83f55eeadaffff8"
x-amz-version-id: WiVQuLqYCK8PLcNQlOtWXKZuSJd1UIHN
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-cache-status: HIT
age: 4017
expires: Wed, 21 Feb 2024 02:11:46 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 858a1654c89fb50f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

POST go.camterest.com/thumbs/view

88.208.20.10

200 OK

384 B

URL

go.camterest.com/thumbs/view

IP / ASN

88.208.20.10

#39572 DataWeb Global Group B.V.

Resource Info

File typeJSON text data

First Seen2024-08-20

Last Seen2024-08-20

Times Seen1

Size384 B (384 bytes)

MD5bb8e692ea9f5c27650ae874a3907d517

SHA11f73fd352a45baa2fd53146f60c8ed5b2c3a8cee

SHA2567e226d09667764b4fe4ecb243a6eb695e688bf235a7f0f9916a074fd1908927f

Certificate Info

IssuerLet's Encrypt

Subjectgo.camterest.com

FingerprintB9:1C:8E:DC:5F:4A:CE:90:33:EF:EA:A3:BF:86:A0:D1:95:54:08:A3

ValidityTue, 26 Dec 2023 08:33:41 GMT - Mon, 25 Mar 2024 08:33:40 GMT

HTTP Headers

POST /thumbs/view HTTP/1.1
Host: go.camterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.camterest.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 364
Origin: https://creative.camterest.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
access-control-allow-origin: https://creative.camterest.com
content-type: application/json
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
access-control-allow-credentials: true
date: Tue, 20 Feb 2024 22:11:46 GMT
content-length: 384
strict-transport-security: max-age=15768000

GET img.strpst.com/thumbs/1708467030/131158216_webp

104.18.63.132

200 OK

5.6 kB

URL

img.strpst.com/thumbs/1708467030/131158216_webp

IP / ASN

104.18.63.132

#13335 CLOUDFLARENET

Resource Info

File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp

First Seen2024-08-20

Last Seen2024-08-20

Times Seen1

Size5.6 kB (5564 bytes)

MD54346f581a2e1386e82290a1b90952cd1

SHA1b9b209f7a3136769c810a1f0fee15d9f448adfde

SHA256a923d21331ba745693bba21766aebc0bace34b8d7f8204de54fba80044d12429

Certificate Info

IssuerCloudflare, Inc.

Subjectimg.strpst.com

FingerprintED:62:74:FE:E4:F5:89:43:B3:49:55:FE:18:19:0D:29:24:96:75:BC

ValidityMon, 03 Apr 2023 00:00:00 GMT - Tue, 02 Apr 2024 23:59:59 GMT

HTTP Headers

GET /thumbs/1708467030/131158216_webp HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.camterest.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 20 Feb 2024 22:11:46 GMT
content-type: image/webp
content-length: 5564
etag: "4346f581a2e1386e82290a1b90952cd1"
last-modified: Tue, 20 Feb 2024 22:09:25 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 70
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 858a16555e73b4ed-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET img.strpst.com/thumbs/1708467030/114366692_webp

104.18.63.132

200 OK

12 kB

URL

img.strpst.com/thumbs/1708467030/114366692_webp

IP / ASN

104.18.63.132

#13335 CLOUDFLARENET

Resource Info

File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp

First Seen2024-08-20

Last Seen2024-08-20

Times Seen1

Size12 kB (12502 bytes)

MD5c68dd83decef323923d7fd295e6ec49f

SHA136c34239a2287e34065ec0ed50f0d151b0854778

SHA25643f0434e6eb5b4cd8c541783e4b5745f1d1a276a7f365979bec22f32a43c2542

Certificate Info

IssuerCloudflare, Inc.

Subjectimg.strpst.com

FingerprintED:62:74:FE:E4:F5:89:43:B3:49:55:FE:18:19:0D:29:24:96:75:BC

ValidityMon, 03 Apr 2023 00:00:00 GMT - Tue, 02 Apr 2024 23:59:59 GMT

HTTP Headers

GET /thumbs/1708467030/114366692_webp HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.camterest.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 20 Feb 2024 22:11:46 GMT
content-type: image/webp
content-length: 12502
etag: "c68dd83decef323923d7fd295e6ec49f"
last-modified: Tue, 20 Feb 2024 22:09:36 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 78
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 858a16559ec8b4ed-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET img.strpst.com/thumbs/1708467030/57297042_webp

104.18.63.132

200 OK

16 kB

URL

img.strpst.com/thumbs/1708467030/57297042_webp

IP / ASN

104.18.63.132

#13335 CLOUDFLARENET

Resource Info

File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp

First Seen2024-08-20

Last Seen2024-08-20

Times Seen1

Size16 kB (15936 bytes)

MD597b670d3b8e97df36a38bd7f564055de

SHA1e4b552b04ba047068740aa6627a914f9bbb877cd

SHA256ed2d88d7d9f3104b2325bb483553e74d964945caa6774866a06dea0d267fe6ac

Certificate Info

IssuerCloudflare, Inc.

Subjectimg.strpst.com

FingerprintED:62:74:FE:E4:F5:89:43:B3:49:55:FE:18:19:0D:29:24:96:75:BC

ValidityMon, 03 Apr 2023 00:00:00 GMT - Tue, 02 Apr 2024 23:59:59 GMT

HTTP Headers

GET /thumbs/1708467030/57297042_webp HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.camterest.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 20 Feb 2024 22:11:46 GMT
content-type: image/webp
content-length: 15936
etag: "97b670d3b8e97df36a38bd7f564055de"
last-modified: Tue, 20 Feb 2024 22:09:28 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 83
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 858a16559ec6b4ed-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET img.strpst.com/thumbs/1708467030/69186111_webp

104.18.63.132

200 OK

7.6 kB

URL

img.strpst.com/thumbs/1708467030/69186111_webp

IP / ASN

104.18.63.132

#13335 CLOUDFLARENET

Resource Info

File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 270x360, Scaling: [none]x[none], YUV color, decoders should clamp

First Seen2024-08-20

Last Seen2024-08-20

Times Seen1

Size7.6 kB (7570 bytes)

MD5fe4a78119cd8fc4de4f19d669766db49

SHA1d2d78cec5e283612a247fb52f76f4da7dcd7e426

SHA25692294ef2ff8e0e799e08e0146883555ca696af8be7b76ee7fec680a2c13baaea

Certificate Info

IssuerCloudflare, Inc.

Subjectimg.strpst.com

FingerprintED:62:74:FE:E4:F5:89:43:B3:49:55:FE:18:19:0D:29:24:96:75:BC

ValidityMon, 03 Apr 2023 00:00:00 GMT - Tue, 02 Apr 2024 23:59:59 GMT

HTTP Headers

GET /thumbs/1708467030/69186111_webp HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.camterest.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 20 Feb 2024 22:11:46 GMT
content-type: image/webp
content-length: 7570
etag: "fe4a78119cd8fc4de4f19d669766db49"
last-modified: Tue, 20 Feb 2024 22:10:17 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 68
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 858a16559ec9b4ed-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET img.strpst.com/thumbs/1708467030/144523972_webp

104.18.63.132

200 OK

8.5 kB

URL

img.strpst.com/thumbs/1708467030/144523972_webp

IP / ASN

104.18.63.132

#13335 CLOUDFLARENET

Resource Info

File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp

First Seen2024-08-20

Last Seen2024-08-20

Times Seen1

Size8.5 kB (8462 bytes)

MD5158318647fe6fd60e67ec8bdcd92e580

SHA17faddc2b065291023cbc311346dcaab701079f15

SHA25619a3ad99b3e43b770e5cf0a9a01fb4fe68e0ac76a77b5450ff98ff0572c6a0c3

Certificate Info

IssuerCloudflare, Inc.

Subjectimg.strpst.com

FingerprintED:62:74:FE:E4:F5:89:43:B3:49:55:FE:18:19:0D:29:24:96:75:BC

ValidityMon, 03 Apr 2023 00:00:00 GMT - Tue, 02 Apr 2024 23:59:59 GMT

HTTP Headers

GET /thumbs/1708467030/144523972_webp HTTP/1.1
Host: img.strpst.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.camterest.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 20 Feb 2024 22:11:46 GMT
content-type: image/webp
content-length: 8462
etag: "158318647fe6fd60e67ec8bdcd92e580"
last-modified: Tue, 20 Feb 2024 22:10:15 GMT
cache-control: public, max-age=1800, s-maxage=1800
access-control-allow-origin: *
access-control-allow-methods: GET
cf-cache-status: HIT
age: 84
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 858a1655befbb4ed-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET stripchat.global/checkUrl

104.18.63.130

200 OK

15 B

URL

stripchat.global/checkUrl

IP / ASN

104.18.63.130

#13335 CLOUDFLARENET

Resource Info

File typeJSON text data

First Seen2023-07-14

Last Seen2025-08-02

Times Seen4645

Size15 B (15 bytes)

MD57fb97eb7c8636552ad068f6d56b5ea34

SHA1b69679936779fb02503bc0fe1374a737cc762ecb

SHA256e78008828abaa93c4462e326ef384dcda1443352a0f24bdeedada6a6fdbfd1d5

Certificate Info

IssuerCloudflare, Inc.

Subjectstripchat.global

Fingerprint3C:56:7E:55:79:BA:4E:B6:1C:F5:04:06:89:2E:71:68:36:C6:90:9A

ValidityMon, 23 Oct 2023 00:00:00 GMT - Tue, 22 Oct 2024 23:59:59 GMT

HTTP Headers

GET /checkUrl HTTP/1.1
Host: stripchat.global
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en
Accept-Encoding: gzip, deflate, br
Referer: https://creative.camterest.com/
Origin: https://creative.camterest.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 20 Feb 2024 22:11:46 GMT
content-type: application/json
content-length: 15
access-control-allow-origin: https://creative.camterest.com
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=ybutE__VPLVPHMxnhmMhwv5mjiUKUfTyAWHJ7ImHSeM-1708467106-1.0-ARsG6Go0lUi8Xqfbi+50afsHWc28K8Ty5vQecv2DaZETfxKZzdO2On8qmKpkeypJSjDvmbywpkVcyzcTLwoqEkg3pZ+fV3gW4xAGu4UBJ3Se; path=/; expires=Tue, 20-Feb-24 22:41:46 GMT; domain=.stripchat.global; HttpOnly; Secure; SameSite=None
__cflb=02DiuGyDLPvii6XBe57uvfNJUFkxLJd5CqjxDxxwyBftG; SameSite=None; Secure; path=/; expires=Wed, 21-Feb-24 22:11:46 GMT; HttpOnly
server: cloudflare
cf-ray: 858a1655cb2c0b55-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET video.xxxviiijmp.com/production/whiteLabels/icon/a/1/f/a1f422a1fe818f4b418d7c4fb111533c.jpeg

104.18.59.150

200 OK

835 kB

URL

video.xxxviiijmp.com/production/whiteLabels/icon/a/1/f/a1f422a1fe818f4b418d7c4fb111533c.jpeg

IP / ASN

104.18.59.150

#13335 CLOUDFLARENET

Resource Info

File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [ - TIFF image data, big-endian, direntries=2], baseline, precision 8, 288x288, components 3

First Seen2024-01-03

Last Seen2025-06-25

Times Seen56

Size835 kB (834729 bytes)

MD5d3fbb3afcf38c4e9a2b156d1362e6fab

SHA186c8b32aa2a802bd3c6696100a99e995efb2c93c

SHA256d9342a347433f7b237298144cc31bf8ebe5b98328b27e6ec004f41b1839ffb5d

Certificate Info

IssuerCloudflare, Inc.

Subjectxxxviiijmp.com

Fingerprint9E:90:15:DB:63:8A:B4:41:A4:D5:B3:FC:26:60:B7:3A:FA:2B:D3:53

ValidityWed, 03 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT

HTTP Headers

GET /production/whiteLabels/icon/a/1/f/a1f422a1fe818f4b418d7c4fb111533c.jpeg HTTP/1.1
Host: video.xxxviiijmp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.camterest.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 20 Feb 2024 22:11:46 GMT
content-type: image/jpeg
content-length: 834729
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
cf-bgj: h2pri
etag: "d3fbb3afcf38c4e9a2b156d1362e6fab"
last-modified: Mon, 21 Mar 2022 12:58:02 GMT
x-amz-id-2: xYI9PPkqOQzkg0vDI2LY5G8Ucw5rkQSpbbyYa6JZxCahfIB/K9zBVCZK5me68hdypxAWhGrBKKw=
x-amz-request-id: 4YXZ1SPDHJ3CFSCQ
x-amz-version-id: sZwAAIq.jocSZEh1X8g2iE5uaQZYzlOr
cf-cache-status: HIT
age: 2191
expires: Wed, 21 Feb 2024 02:11:46 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 858a16574cd3568b-OSL
alt-svc: h3=":443"; ma=86400

POST go.camterest.com/app/domain-checker/check-result

88.208.20.10

204 No Content

0 B

URL

go.camterest.com/app/domain-checker/check-result

IP / ASN

88.208.20.10

#39572 DataWeb Global Group B.V.

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5607188

Size0 B (0 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate Info

IssuerLet's Encrypt

Subjectgo.camterest.com

FingerprintB9:1C:8E:DC:5F:4A:CE:90:33:EF:EA:A3:BF:86:A0:D1:95:54:08:A3

ValidityTue, 26 Dec 2023 08:33:41 GMT - Mon, 25 Mar 2024 08:33:40 GMT

HTTP Headers

POST /app/domain-checker/check-result HTTP/1.1
Host: go.camterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.camterest.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 177
Origin: https://creative.camterest.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
strict-transport-security: max-age=15768000
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
access-control-allow-origin: https://creative.camterest.com
access-control-allow-credentials: true
date: Tue, 20 Feb 2024 22:11:46 GMT

GET creative.camterest.com/LPAkira/hls.4cfa5b780bfed20a8b26.js

185.98.55.81

200 OK

61 B

URL

creative.camterest.com/LPAkira/hls.4cfa5b780bfed20a8b26.js

IP / ASN

185.98.55.81

#39572 DataWeb Global Group B.V.

Resource Info

File typeASCII text, with no line terminators

First Seen2023-03-14

Last Seen2025-08-01

Times Seen2416

Size61 B (61 bytes)

MD522f22b49cc901aa95826401f7ce0930c

SHA16471abdd35ab6d511b67d73ad1375f1ee0f255de

SHA2560fae8b03858a764bad3e9af19bfc924ead5b9e25c760432c19e91cba3dff1cf3

Certificate Info

IssuerLet's Encrypt

Subjectcreative.camterest.com

FingerprintA2:F0:86:AB:D3:8E:FC:DB:24:9C:1F:74:A8:10:A6:DF:BB:00:2B:4F

ValidityTue, 26 Dec 2023 13:02:03 GMT - Mon, 25 Mar 2024 13:02:02 GMT

HTTP Headers

GET /LPAkira/hls.4cfa5b780bfed20a8b26.js HTTP/1.1
Host: creative.camterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.camterest.com/LPAkira?action=sbSignupWithModel&autoplay=allInFocus&autoplayForce=1&campaignId=5cad3c1caba869d88fad5ee079b8d701edd64c2f2d10934839acb742df41a4f8&campaignType=smartpop&creativeId=5d23be301a5be416fed3c585f9bcceef207b744eec31055abb2f2fded2adec8d&domain=stripchat&iterationId=820720&masterSmartpopId=1603&memberId=34f31bdd73b055de92e46382495cad75&p1=ctf&ruleId=345&smartpopId=10251&userId=b29d5de8081854ddfa64062b762e5cdd52ba5a9ca8232adaa0bb5b33afa805c0&variationId=32628
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-length: 61
pragma: public
cache-control: max-age=10
date: Tue, 20 Feb 2024 22:11:46 GMT
expires: Tue, 20 Feb 2024 22:11:56 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 14 Feb 2024 08:21:28 GMT
report-to: { "url": "https://go.camterest.com/report", "max_age":  1048576 }
strict-transport-security: max-age=15768000
etag: "65cc7808-3d"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64

GET b-hls-12.doppiocdn.com/hls/131158216/131158216_240p_init_62uDuyjKG2L6j2yZ.mp4

104.18.63.133

200 OK

1.2 kB

URL

b-hls-12.doppiocdn.com/hls/131158216/131158216_240p_init_62uDuyjKG2L6j2yZ.mp4

IP / ASN

104.18.63.133

#13335 CLOUDFLARENET

Resource Info

File typeISO Media, MP4 Base Media v5

First Seen2023-09-29

Last Seen2024-08-21

Times Seen29

Size1.2 kB (1218 bytes)

MD54f853820526aa931ca500b3f1e9de113

SHA1e16da7ccdc60874d99a989108925ef7f9a56404d

SHA256dfac90c13b5c0755b1fd784b66563f9bd3bfc9440b8808752d71fb1818561cad

Certificate Info

IssuerLet's Encrypt

Subjectdoppiocdn.com

Fingerprint64:0E:58:A5:8D:89:D9:85:CF:87:52:F9:EA:FA:DB:C9:AA:8E:5F:7D

ValidityMon, 19 Feb 2024 00:27:46 GMT - Sun, 19 May 2024 00:27:45 GMT

HTTP Headers

GET /hls/131158216/131158216_240p_init_62uDuyjKG2L6j2yZ.mp4 HTTP/1.1
Host: b-hls-12.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.camterest.com
DNT: 1
Connection: keep-alive
Referer: https://creative.camterest.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 20 Feb 2024 22:11:47 GMT
content-type: video/mp4
content-length: 1218
last-modified: Tue, 20 Feb 2024 21:56:40 GMT
etag: "65d52018-4c2"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60
timing-allow-origin: *
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 858a165abacc5697-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET creative.camterest.com/LPAkira/vendors~hls.8b58cc1104228ded0015.js

185.98.55.81

200 OK

228 kB

URL

creative.camterest.com/LPAkira/vendors~hls.8b58cc1104228ded0015.js

IP / ASN

185.98.55.81

#39572 DataWeb Global Group B.V.

Resource Info

File typegzip compressed data, from Unix

First Seen2024-08-20

Last Seen2024-08-20

Times Seen1

Size228 kB (227867 bytes)

MD59d2a32cbf6d387e882fe45251a924d50

SHA1c2ce5f58491ad4b168770b76bd1a2bc533581d72

SHA2563c5f7b114367a27d6d4b3bf7cbafb2df45e1112c105e17a966637920548d5d2a

Certificate Info

IssuerLet's Encrypt

Subjectcreative.camterest.com

FingerprintA2:F0:86:AB:D3:8E:FC:DB:24:9C:1F:74:A8:10:A6:DF:BB:00:2B:4F

ValidityTue, 26 Dec 2023 13:02:03 GMT - Mon, 25 Mar 2024 13:02:02 GMT

HTTP Headers

GET /LPAkira/vendors~hls.8b58cc1104228ded0015.js HTTP/1.1
Host: creative.camterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.camterest.com/LPAkira?action=sbSignupWithModel&autoplay=allInFocus&autoplayForce=1&campaignId=5cad3c1caba869d88fad5ee079b8d701edd64c2f2d10934839acb742df41a4f8&campaignType=smartpop&creativeId=5d23be301a5be416fed3c585f9bcceef207b744eec31055abb2f2fded2adec8d&domain=stripchat&iterationId=820720&masterSmartpopId=1603&memberId=34f31bdd73b055de92e46382495cad75&p1=ctf&ruleId=345&smartpopId=10251&userId=b29d5de8081854ddfa64062b762e5cdd52ba5a9ca8232adaa0bb5b33afa805c0&variationId=32628
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
vary: Accept-Encoding
content-encoding: gzip
report-to: { "url": "https://go.camterest.com/report", "max_age":  1048576 }
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
content-type: application/javascript; charset=utf-8
etag: W/"65cc7808-2b6c9"
cache-control: max-age=10
last-modified: Wed, 14 Feb 2024 08:21:28 GMT
expires: Tue, 20 Feb 2024 22:11:56 GMT
strict-transport-security: max-age=15768000
pragma: public
date: Tue, 20 Feb 2024 22:11:46 GMT

GET b-hls-12.doppiocdn.com/hls/131158216/131158216_240p_450_mllXLOIGVwlrUli3_1708467100.mp4

104.18.63.123

200 OK

177 kB

URL

b-hls-12.doppiocdn.com/hls/131158216/131158216_240p_450_mllXLOIGVwlrUli3_1708467100.mp4

IP / ASN

104.18.63.123

#13335 CLOUDFLARENET

Resource Info

File typedata

First Seen2024-08-20

Last Seen2024-08-20

Times Seen1

Size177 kB (176572 bytes)

MD5e29f28a4bcd65678b09440ab6c414404

SHA1ed7e687aabba3805b620e68236643cda624c9cb9

SHA256c074b7c7c6e267282da0b848aae19bcf7442f16c6df0efff2bab4197f4366e5d

Certificate Info

IssuerLet's Encrypt

Subjectdoppiocdn.com

Fingerprint64:0E:58:A5:8D:89:D9:85:CF:87:52:F9:EA:FA:DB:C9:AA:8E:5F:7D

ValidityMon, 19 Feb 2024 00:27:46 GMT - Sun, 19 May 2024 00:27:45 GMT

HTTP Headers

GET /hls/131158216/131158216_240p_450_mllXLOIGVwlrUli3_1708467100.mp4 HTTP/1.1
Host: b-hls-12.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.camterest.com
DNT: 1
Connection: keep-alive
Referer: https://creative.camterest.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 20 Feb 2024 22:11:47 GMT
content-type: video/mp4
content-length: 176572
last-modified: Tue, 20 Feb 2024 22:11:42 GMT
etag: "65d5239e-2b1bc"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60
timing-allow-origin: *
cf-cache-status: HIT
age: 4
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 858a165b7dabb4fd-OSL
alt-svc: h3=":443"; ma=86400

GET b-hls-12.doppiocdn.com/hls/131158216/131158216_240p.m3u8

104.18.63.123

200 OK

5.7 kB

URL

b-hls-12.doppiocdn.com/hls/131158216/131158216_240p.m3u8

IP / ASN

104.18.63.123

#13335 CLOUDFLARENET

Resource Info

File typeM3U playlist, ASCII text

First Seen2024-08-20

Last Seen2024-08-20

Times Seen1

Size5.7 kB (5680 bytes)

MD5b36040894461f6c4cea12b064a70107c

SHA144da13aef09c8d0079539671e8195e501a7d14c5

SHA256a32d7b130011cb9e593084631a4005d4b1f66b293671ae8ae57522575e08b8e3

Certificate Info

IssuerLet's Encrypt

Subjectdoppiocdn.com

Fingerprint64:0E:58:A5:8D:89:D9:85:CF:87:52:F9:EA:FA:DB:C9:AA:8E:5F:7D

ValidityMon, 19 Feb 2024 00:27:46 GMT - Sun, 19 May 2024 00:27:45 GMT

HTTP Headers

GET /hls/131158216/131158216_240p.m3u8 HTTP/1.1
Host: b-hls-12.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.camterest.com
DNT: 1
Connection: keep-alive
Referer: https://creative.camterest.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 20 Feb 2024 22:11:52 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Tue, 20 Feb 2024 22:11:50 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1
timing-allow-origin: *
x-proxy-cache-orig: HIT
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 858a167feba5b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET b-hls-12.doppiocdn.com/hls/131158216/131158216_240p.m3u8

104.18.63.123

200 OK

7.0 kB

URL

b-hls-12.doppiocdn.com/hls/131158216/131158216_240p.m3u8

IP / ASN

104.18.63.123

#13335 CLOUDFLARENET

Resource Info

File typeM3U playlist, ASCII text

First Seen2024-08-20

Last Seen2024-08-20

Times Seen1

Size7.0 kB (6958 bytes)

MD5b864367d775faceb32fd9f3699ddf92d

SHA18e9cff23de814c0bedd0487a301869d68ed17121

SHA25645c92aa91df9cca85a86c1275f49a91510edf1be52214e4f210772fc226bd5ef

Certificate Info

IssuerLet's Encrypt

Subjectdoppiocdn.com

Fingerprint64:0E:58:A5:8D:89:D9:85:CF:87:52:F9:EA:FA:DB:C9:AA:8E:5F:7D

ValidityMon, 19 Feb 2024 00:27:46 GMT - Sun, 19 May 2024 00:27:45 GMT

HTTP Headers

GET /hls/131158216/131158216_240p.m3u8 HTTP/1.1
Host: b-hls-12.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.camterest.com
DNT: 1
Connection: keep-alive
Referer: https://creative.camterest.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 20 Feb 2024 22:11:54 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Tue, 20 Feb 2024 22:11:52 GMT
access-control-allow-origin: *
cache-control: public, max-age=1, s-maxage=1
timing-allow-origin: *
x-proxy-cache-orig: HIT
cf-cache-status: HIT
age: 1
server: cloudflare
cf-ray: 858a168c6955b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET creative.camterest.com/LPAkira/assets/favicon-heart-16.png

185.98.55.81

200 OK

403 B

URL

creative.camterest.com/LPAkira/assets/favicon-heart-16.png

IP / ASN

185.98.55.81

#39572 DataWeb Global Group B.V.

Resource Info

File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced

First Seen2023-09-08

Last Seen2025-08-01

Times Seen358

Size403 B (403 bytes)

MD56697f6d6c35483d4f8ecfcc6b2acd601

SHA1517baeadaea8c1205c505254d76a2e38e69d4c63

SHA2562db351009c7241e96363ff3287a5654b33b1d051f53ad73205faf6f323ad6588

Certificate Info

IssuerLet's Encrypt

Subjectcreative.camterest.com

FingerprintA2:F0:86:AB:D3:8E:FC:DB:24:9C:1F:74:A8:10:A6:DF:BB:00:2B:4F

ValidityTue, 26 Dec 2023 13:02:03 GMT - Mon, 25 Mar 2024 13:02:02 GMT

HTTP Headers

GET /LPAkira/assets/favicon-heart-16.png HTTP/1.1
Host: creative.camterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.camterest.com/LPAkira?action=sbSignupWithModel&autoplay=allInFocus&autoplayForce=1&campaignId=5cad3c1caba869d88fad5ee079b8d701edd64c2f2d10934839acb742df41a4f8&campaignType=smartpop&creativeId=5d23be301a5be416fed3c585f9bcceef207b744eec31055abb2f2fded2adec8d&domain=stripchat&iterationId=820720&masterSmartpopId=1603&memberId=34f31bdd73b055de92e46382495cad75&p1=ctf&ruleId=345&smartpopId=10251&userId=b29d5de8081854ddfa64062b762e5cdd52ba5a9ca8232adaa0bb5b33afa805c0&variationId=32628
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
accept-ranges: bytes
content-type: image/png
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
strict-transport-security: max-age=15768000
content-length: 403
pragma: public
date: Tue, 20 Feb 2024 22:11:45 GMT
etag: "65cc76b3-193"
expires: Tue, 20 Feb 2024 22:11:55 GMT
cache-control: max-age=10
last-modified: Wed, 14 Feb 2024 08:15:47 GMT
report-to: { "url": "https://go.camterest.com/report", "max_age":  1048576 }

GET creative.camterest.com/LPAkira/lang/en.json

185.98.55.81

200 OK

9.0 kB

URL

creative.camterest.com/LPAkira/lang/en.json

IP / ASN

185.98.55.81

#39572 DataWeb Global Group B.V.

Resource Info

File typeUnicode text, UTF-8 text, with very long lines (9388), with no line terminators

First Seen2023-04-11

Last Seen2025-01-09

Times Seen610

Size9.0 kB (9042 bytes)

MD5f649911dbc4d48c52fa1e3aed5c7ebed

SHA12c9df0cf4d60202833c2e84f0c3f49805de8c464

SHA25608d8f88bfa5998bf6dcb25db05d00765461195b565e33edd0ba60f3b52039b86

Certificate Info

IssuerLet's Encrypt

Subjectcreative.camterest.com

FingerprintA2:F0:86:AB:D3:8E:FC:DB:24:9C:1F:74:A8:10:A6:DF:BB:00:2B:4F

ValidityTue, 26 Dec 2023 13:02:03 GMT - Mon, 25 Mar 2024 13:02:02 GMT

HTTP Headers

GET /LPAkira/lang/en.json HTTP/1.1
Host: creative.camterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://creative.camterest.com/LPAkira?action=sbSignupWithModel&autoplay=allInFocus&autoplayForce=1&campaignId=5cad3c1caba869d88fad5ee079b8d701edd64c2f2d10934839acb742df41a4f8&campaignType=smartpop&creativeId=5d23be301a5be416fed3c585f9bcceef207b744eec31055abb2f2fded2adec8d&domain=stripchat&iterationId=820720&masterSmartpopId=1603&memberId=34f31bdd73b055de92e46382495cad75&p1=ctf&ruleId=345&smartpopId=10251&userId=b29d5de8081854ddfa64062b762e5cdd52ba5a9ca8232adaa0bb5b33afa805c0&variationId=32628
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
etag: W/"65cc76b3-2352"
pragma: public
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
date: Tue, 20 Feb 2024 22:11:45 GMT
content-type: application/json
report-to: { "url": "https://go.camterest.com/report", "max_age":  1048576 }
vary: Accept-Encoding
strict-transport-security: max-age=15768000
content-encoding: gzip
last-modified: Wed, 14 Feb 2024 08:15:47 GMT
expires: Tue, 20 Feb 2024 22:11:55 GMT
cache-control: max-age=10

GET creative.camterest.com/LPAkira/main.38ad50f823914bc69f56.css

185.98.55.81

200 OK

72 kB

URL

creative.camterest.com/LPAkira/main.38ad50f823914bc69f56.css

IP / ASN

185.98.55.81

#39572 DataWeb Global Group B.V.

Resource Info

File typeASCII text, with very long lines (65536), with no line terminators

First Seen2023-04-11

Last Seen2024-08-21

Times Seen404

Size72 kB (72214 bytes)

MD5de257e4d88da7068b4205afc3479e24b

SHA114582708051ff4ccc115cd55143ab0c2c4d9e8bd

SHA256541ba5476e5e2197bace9f89baa8cc843feae4521b2b4ed289b502636b42abcc

Certificate Info

IssuerLet's Encrypt

Subjectcreative.camterest.com

FingerprintA2:F0:86:AB:D3:8E:FC:DB:24:9C:1F:74:A8:10:A6:DF:BB:00:2B:4F

ValidityTue, 26 Dec 2023 13:02:03 GMT - Mon, 25 Mar 2024 13:02:02 GMT

HTTP Headers

GET /LPAkira/main.38ad50f823914bc69f56.css HTTP/1.1
Host: creative.camterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.camterest.com/LPAkira?action=sbSignupWithModel&autoplay=allInFocus&autoplayForce=1&campaignId=5cad3c1caba869d88fad5ee079b8d701edd64c2f2d10934839acb742df41a4f8&campaignType=smartpop&creativeId=5d23be301a5be416fed3c585f9bcceef207b744eec31055abb2f2fded2adec8d&domain=stripchat&iterationId=820720&masterSmartpopId=1603&memberId=34f31bdd73b055de92e46382495cad75&p1=ctf&ruleId=345&smartpopId=10251&userId=b29d5de8081854ddfa64062b762e5cdd52ba5a9ca8232adaa0bb5b33afa805c0&variationId=32628
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
cache-control: max-age=10
content-encoding: gzip
last-modified: Wed, 14 Feb 2024 08:21:28 GMT
expires: Tue, 20 Feb 2024 22:11:55 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
vary: Accept-Encoding
content-type: text/css
date: Tue, 20 Feb 2024 22:11:45 GMT
strict-transport-security: max-age=15768000
etag: W/"65cc7808-11a16"
report-to: { "url": "https://go.camterest.com/report", "max_age":  1048576 }
pragma: public

GET creative.camterest.com/LPAkira/main.38ad50f823914bc69f56.js

185.98.55.81

200 OK

406 kB

URL

creative.camterest.com/LPAkira/main.38ad50f823914bc69f56.js

IP / ASN

185.98.55.81

#39572 DataWeb Global Group B.V.

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5607188

Size406 kB (405468 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate Info

IssuerLet's Encrypt

Subjectcreative.camterest.com

FingerprintA2:F0:86:AB:D3:8E:FC:DB:24:9C:1F:74:A8:10:A6:DF:BB:00:2B:4F

ValidityTue, 26 Dec 2023 13:02:03 GMT - Mon, 25 Mar 2024 13:02:02 GMT

HTTP Headers

GET /LPAkira/main.38ad50f823914bc69f56.js HTTP/1.1
Host: creative.camterest.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.camterest.com/LPAkira?action=sbSignupWithModel&autoplay=allInFocus&autoplayForce=1&campaignId=5cad3c1caba869d88fad5ee079b8d701edd64c2f2d10934839acb742df41a4f8&campaignType=smartpop&creativeId=5d23be301a5be416fed3c585f9bcceef207b744eec31055abb2f2fded2adec8d&domain=stripchat&iterationId=820720&masterSmartpopId=1603&memberId=34f31bdd73b055de92e46382495cad75&p1=ctf&ruleId=345&smartpopId=10251&userId=b29d5de8081854ddfa64062b762e5cdd52ba5a9ca8232adaa0bb5b33afa805c0&variationId=32628
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-Wow64
etag: W/"65cc7808-62fdc"
report-to: { "url": "https://go.camterest.com/report", "max_age":  1048576 }
pragma: public
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
expires: Tue, 20 Feb 2024 22:11:55 GMT
cache-control: max-age=10
strict-transport-security: max-age=15768000
content-encoding: gzip
last-modified: Wed, 14 Feb 2024 08:21:28 GMT
date: Tue, 20 Feb 2024 22:11:45 GMT

GET www.gstatic.com/recaptcha/releases/yiNW3R9jkyLVP5-EEZLDzUtA/recaptcha__en.js

142.250.74.67

200 OK

500 kB

URL

www.gstatic.com/recaptcha/releases/yiNW3R9jkyLVP5-EEZLDzUtA/recaptcha__en.js

IP / ASN

142.250.74.67

#15169 GOOGLE

Resource Info

File typeJavaScript source, ASCII text, with very long lines (733)

First Seen2024-02-13

Last Seen2024-08-20

Times Seen2534

Size500 kB (499483 bytes)

MD5c37774be5504a3a7def09eff73263bc3

SHA1c5160a2908b3fd4230ed5cf521728fabaf3b5c06

SHA2564fd66999fb60ad3289dfaee132ff52c0b1ecba71661e4cbfe47d09ac4f1cd5a1

Certificate Info

IssuerGoogle Trust Services LLC

Subject*.gstatic.com

FingerprintF1:41:DD:4F:A6:9F:7B:AE:AE:AF:78:BD:08:F8:C8:40:3C:C4:8C:93

ValidityMon, 29 Jan 2024 08:19:40 GMT - Mon, 22 Apr 2024 08:19:39 GMT

HTTP Headers

GET /recaptcha/releases/yiNW3R9jkyLVP5-EEZLDzUtA/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.camterest.com
DNT: 1
Connection: keep-alive
Referer: https://creative.camterest.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 198909
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Feb 2024 19:41:49 GMT
expires: Wed, 19 Feb 2025 19:41:49 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 12 Feb 2024 03:00:37 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 8996
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET b-hls-12.doppiocdn.com/hls/131158216/131158216_240p_449_7lWHWDO9ezeD00jw_1708467098.mp4

104.18.63.133

200 OK

176 kB

URL

b-hls-12.doppiocdn.com/hls/131158216/131158216_240p_449_7lWHWDO9ezeD00jw_1708467098.mp4

IP / ASN

104.18.63.133

#13335 CLOUDFLARENET

Resource Info

File typedata

First Seen2024-08-20

Last Seen2024-08-20

Times Seen1

Size176 kB (175633 bytes)

MD5d2bef97f5df2d59b3694bfb9b98f94bb

SHA1b0e70ce4138c09074c3f848a8cd7b74e0063a6b1

SHA2564717a127f8f68e8aaf0ea13ce6bf6382488a827f7ed393af622bf495e74ae1a1

Certificate Info

IssuerLet's Encrypt

Subjectdoppiocdn.com

Fingerprint64:0E:58:A5:8D:89:D9:85:CF:87:52:F9:EA:FA:DB:C9:AA:8E:5F:7D

ValidityMon, 19 Feb 2024 00:27:46 GMT - Sun, 19 May 2024 00:27:45 GMT

HTTP Headers

GET /hls/131158216/131158216_240p_449_7lWHWDO9ezeD00jw_1708467098.mp4 HTTP/1.1
Host: b-hls-12.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.camterest.com
DNT: 1
Connection: keep-alive
Referer: https://creative.camterest.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 20 Feb 2024 22:11:47 GMT
content-type: video/mp4
content-length: 175633
last-modified: Tue, 20 Feb 2024 22:11:40 GMT
etag: "65d5239c-2ae11"
access-control-allow-origin: *
cache-control: public, max-age=60, s-maxage=60
timing-allow-origin: *
cf-cache-status: HIT
age: 6
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 858a165b2b385697-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET edge-hls.doppiocdn.com/hls/131158216/master/131158216_240p.m3u8

104.18.63.133

200 OK

226 B

URL

edge-hls.doppiocdn.com/hls/131158216/master/131158216_240p.m3u8

IP / ASN

104.18.63.133

#13335 CLOUDFLARENET

Resource Info

File typeM3U playlist, ASCII text, with no line terminators

First Seen2024-08-20

Last Seen2024-08-20

Times Seen1

Size226 B (226 bytes)

MD58c7ef49d8aa01bdafbf9916155e00ce9

SHA1f4ec5191391fabc8bec13a37869ea25e520fb4b7

SHA256d86a72b2b12fb89348a2d46d97658a469173228ec3d0b9c4e10d109ca37577e5

Certificate Info

IssuerLet's Encrypt

Subjectdoppiocdn.com

Fingerprint64:0E:58:A5:8D:89:D9:85:CF:87:52:F9:EA:FA:DB:C9:AA:8E:5F:7D

ValidityMon, 19 Feb 2024 00:27:46 GMT - Sun, 19 May 2024 00:27:45 GMT

HTTP Headers

GET /hls/131158216/master/131158216_240p.m3u8 HTTP/1.1
Host: edge-hls.doppiocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://creative.camterest.com
DNT: 1
Connection: keep-alive
Referer: https://creative.camterest.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 20 Feb 2024 22:11:46 GMT
content-type: application/vnd.apple.mpegurl
vary: Accept-Encoding
last-modified: Tue, 20 Feb 2024 22:11:39 GMT
access-control-allow-origin: *
cache-control: public, max-age=3, s-maxage=3
timing-allow-origin: *
x-proxy-cache-orig: EXPIRED
cf-cache-status: EXPIRED
set-cookie: __cflb=02DiuDqTDHWLb7zSddG9FJa5EtXaAnGxA6TESmKhsjFuN; SameSite=None; Secure; path=/; expires=Wed, 21-Feb-24 21:11:46 GMT; HttpOnly
server: cloudflare
cf-ray: 858a1659e9db5697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2